GitLab < 16.10.6 / 16.11 < 16.11.3 / 17.0 < 17.0.1 (CVE-2024-2874)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potenti...

The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2024-3761

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...

CVE-2024-3761

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...

CVE-2024-3761 Missing Authorization on Delete Datasets in lunary-ai/lunary

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...

CVE-2024-3761

In lunary-ai/lunary, version 1.2.2 contains an unauthorized deletion vulnerability on the DELETE endpoint at packages/backend/src/api/v1/datasets due to missing authorization/authentication. This allows any user (no token required) to delete a dataset, potentially causing data loss or service dis...

CVE-2024-3761 Missing Authorization on Delete Datasets in lunary-ai/lunary

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...

PT-2024-5318 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.4 Description: The issue is related to flaws in the deserialization mechanism of the IBM i operating system. Exploitation of this issue could allow a remote attacker to execute arbitrary code, leading to a denial ...

Feds Bust N. Korean Identity Theft Ring Targeting US Firms

By Deeba Ahmed North Korea targeted US companies with stolen identities in a cybercrime scheme. The Justice Department cracks down, seizes websites, and disrupts revenue streams. This is a post from HackRead.com Read the original post: Feds Bust N. Korean Identity Theft Ring Targeting US Firms...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows attackers to trigger service failures or disclose protected information.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

U.S. Dept Of Defense: Out-Of-Bounds Memory Read on ███

Vulnerability description not provided...

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

Processing specially crafted responses coming from DNSSEC-signed zones can lead to uncontrolled CPU usage, leading to a Denial of Service in the DNSSEC-validating resolver side. This vulnerability applies only for systems where DNSSEC validation is enabled...

The vulnerability of the amdgpu_mca_smu_get_mca_entry() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c driver for the amdgpu core of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpumcasmugetmcaentry function in the drivers/gpu/drm/amd/amdgpu/amdgpumca.c driver for the Linux operating system’s kernel is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ath11kdebugfs_remove_interface(), located in the driver drivers/net/wireless/ath/ath11k/debugfs.c of the wireless adapter ath11k driver for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the function ath11kdebugfsremoveinterface in the drivers/net/wireless/ath/ath11k/debugfs.c file of the wireless adapter ath11k driver in the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability in the implementation of the SMC kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the implementation of the SMC kernel of the Linux operating system relates to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

BIT-CILIUM-2023-27595 Cilium eBPF filters may be temporarily removed during agent restart

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

Vulnerability of the Server component: The DML of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...